WordPress Plugin Vulnerabilities

WP Mobile Detector < 3.6 - Unauthenticated Arbitrary File Upload

Description

The wp-mobile-detector WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
wp-mobile-detector
Fixed in 3.6

References

URL
https://blog.sucuri.net/2016/06/wp-mobile-detector-vulnerability-being-exploited-in-the-wild.html
URL
https://www.pluginvulnerabilities.com/2016/05/31/aribitrary-file-upload-vulnerability-in-wp-mobile-detector/

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
e4739674-eed4-417e-8c4d-2f5351b057cf

Timeline

Publicly Published
2016-06-03 (about 9 years ago)
Added
2016-06-03 (about 9 years ago)
Last Updated
2021-09-21 (about 4 years ago)

Other

Published
Title
Published
2025-01-07
Title
Modula Image Gallery < 2.11.11 - Author+ Arbitrary File Upload
Published
2014-08-01
Title
vithy - Custom Background Shell Upload
Published
2014-08-01
Title
ReFlex Gallery 1.3 - Shell Upload
Published
2014-08-01
Title
Pica Photo Gallery - Arbitrary File Upload
Published
2024-12-18
Title
WP SuperBackup < 2.4 - Unauthenticated Arbitrary File Upload